$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json) Hash identifier: VeyyRtE8h08sQavZI/RRrszRwABdlFmrfJPhcR+ppsA= Subject key identifier: 05:89:42:A7:C9:8A:27:C7:79:94:EE:98:8E:D1:F8:02:4A:AC:1E:A5 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 151DD366E2D76E55C57A6522F38E860A6C751526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft Manifest number: 06FB Signing time: Sun 29 Jun 2025 12:07:59 +0000 Manifest this update: Sun 29 Jun 2025 12:02:59 +0000 Manifest next update: Mon 30 Jun 2025 15:48:59 +0000 Files and hashes: 1: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: HOKjc0v54TIp6QXzJqT8YYvnb0DUizxGbhDDmq02eJE=) 2: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: JFgikoosW77rCCGiBkowQ97xtUQuU8MrNrAShHYoknM=) 3: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=) 4: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=) 5: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=) 6: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: gleXammGNco3AiF4159jPajnO5VNN8RX+h5bhpaHj2c=) 7: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: f6TUhFqS3isV+/cNk8PgUfCkyR1D652ScYlagjbFUVg=) 8: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=) 9: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=) 10: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: YBcj0Y7Hb7dgFTi+rZqUgqhjt4rx48fgaI0O88QVy6s=) 11: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: Ajs11kbN11P2XWfoIJiRn6ZOdr7R8IeCxJs9fIcXO2M=) 12: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: DN/E6aOFiV8KoFntSlnkk78fDXrIalkTpGLDVfdtSoM=) 13: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=) Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 15:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1d:d3:66:e2:d7:6e:55:c5:7a:65:22:f3:8e:86:0a:6c:75:15:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Jun 29 12:02:59 2025 GMT Not After : Jun 30 15:48:59 2025 GMT Subject: CN=058942A7C98A27C77994EE988ED1F8024AAC1EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:cb:e8:ad:2c:3d:a2:cf:71:cb:2c:70:83: 76:a5:f7:fa:70:bf:71:11:33:1a:a2:2d:74:b2:aa: 64:ec:f2:60:37:a3:3e:f7:0d:71:3e:54:9e:1f:bb: c5:18:c0:4b:71:ef:6b:05:ad:55:0a:2d:bf:72:97: be:57:b0:ff:f6:0b:63:88:aa:6c:f7:2b:16:04:60: 17:16:cb:3b:67:78:ab:5f:bf:57:64:74:4a:cf:4b: fa:51:57:d1:bc:7c:d3:ff:70:12:d0:74:cc:05:14: 1c:30:a8:cf:88:38:6c:e4:2e:d8:d7:dc:a7:54:35: 1e:f0:10:7f:10:a7:28:49:0d:4f:b5:d8:4c:b9:84: 3c:14:31:d1:0b:d8:e2:7b:dc:01:45:7e:eb:2a:45: 75:57:48:23:5b:c2:27:a7:b0:58:ac:76:0f:cc:69: 27:6b:15:cb:cb:d1:fe:32:b8:91:7f:19:6c:94:72: 89:86:a2:12:98:45:e4:8c:5a:63:01:e0:9c:79:1d: a4:94:82:79:e2:b6:1b:2d:b5:d0:2c:78:1a:8a:f2: 54:a7:1d:cc:fc:71:d6:99:bd:d6:c4:03:66:cc:28: ef:19:c5:de:93:2c:13:af:b8:1c:b9:dc:16:b3:57: 01:64:f9:7c:53:91:88:f8:82:07:38:6d:f8:95:e9: f8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:89:42:A7:C9:8A:27:C7:79:94:EE:98:8E:D1:F8:02:4A:AC:1E:A5 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2c:c7:d9:f7:70:48:a9:d8:e1:4a:50:53:53:d3:de:f8:3e: 62:3f:a3:f0:1b:09:67:65:5f:b8:6c:14:c6:f0:aa:b7:a7:65: 37:fc:0e:2b:df:ac:93:32:8e:48:dc:5a:5f:ca:5d:d9:24:81: 49:7f:5d:49:d7:a3:40:88:a4:ca:9a:66:10:d5:09:43:c7:ca: a6:f7:f8:a8:d3:0a:05:83:ca:3a:df:57:82:a0:e7:b2:cd:42: b8:88:3f:26:f3:a7:dd:ee:31:1f:bb:63:9d:94:e8:19:3a:ab: f5:1a:32:e1:89:1d:e6:24:c8:48:75:19:5d:e0:3e:83:ad:c8: bc:ab:4d:b9:ac:bb:d5:8f:fb:84:5f:c2:60:43:41:3a:9d:8e: d4:36:30:36:04:7a:03:0e:aa:16:68:30:d1:f1:f9:73:0b:a0: dd:85:4e:e8:47:d2:62:32:f1:36:42:6b:cd:67:61:c1:ea:75: 4f:85:1b:1a:30:f4:0b:a6:c0:75:38:b6:75:ea:ed:1b:e9:71: c6:8d:16:29:f8:45:50:61:9d:32:32:f4:d8:a4:88:3e:13:fe: 47:24:42:76:df:7f:16:e7:5b:d6:d1:5c:33:ce:b9:5c:01:c0: 7f:1e:30:04:55:61:dd:1c:72:9f:59:e7:f8:ae:54:06:ec:6c: e0:d9:b3:1f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUFR3TZuLXblXFemUi846GCmx1FSYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI1MDYyOTEyMDI1OVoX DTI1MDYzMDE1NDg1OVowMzExMC8GA1UEAxMoMDU4OTQyQTdDOThBMjdDNzc5OTRF RTk4OEVEMUY4MDI0QUFDMUVBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbwy+itLD2iz3HLLHCDdqX3+nC/cREzGqItdLKqZOzyYDejPvcNcT5Unh+7 xRjAS3HvawWtVQotv3KXvlew//YLY4iqbPcrFgRgFxbLO2d4q1+/V2R0Ss9L+lFX 0bx80/9wEtB0zAUUHDCoz4g4bOQu2Nfcp1Q1HvAQfxCnKEkNT7XYTLmEPBQx0QvY 4nvcAUV+6ypFdVdII1vCJ6ewWKx2D8xpJ2sVy8vR/jK4kX8ZbJRyiYaiEphF5Ixa YwHgnHkdpJSCeeK2Gy210Cx4GoryVKcdzPxx1pm91sQDZswo7xnF3pMsE6+4HLnc FrNXAWT5fFORiPiCBzht+JXp+OUCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBQFiUKn yYonx3mU7piO0fgCSqwepTAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2 ODk1MEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAPCzH2fdwSKnY4UpQU1PT3vg+Yj+j8BsJZ2VfuGwU xvCqt6dlN/wOK9+skzKOSNxaX8pd2SSBSX9dSdejQIikyppmENUJQ8fKpvf4qNMK BYPKOt9XgqDnss1CuIg/JvOn3e4xH7tjnZToGTqr9Roy4Ykd5iTISHUZXeA+g63I vKtNuay71Y/7hF/CYENBOp2O1DYwNgR6Aw6qFmgw0fH5cwug3YVO6EfSYjLxNkJr zWdhwep1T4UbGjD0C6bAdTi2dertG+lxxo0WKfhFUGGdMjL02KSIPhP+RyRCdt9/ Fudb1tFcM865XAHAfx4wBFVh3Rxyn1nn+K5UBuxs4NmzHw== -----END CERTIFICATE-----Generated at Sun Jun 29 20:16:38 2025 by rpki-client